$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa File: 37ba3cd5-c664-374e-a449-0a19748669f1.roa (raw, json) Hash identifier: fb/DZubtiiq64Y6vlav4JkXZc2Dtm5G8i08n0p3ejsc= Subject key identifier: 61:64:67:8D:2B:28:28:BA:CC:C9:CC:2B:80:BD:FC:8D:26:87:3B:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A13FFC98A107F329B5480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.189.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:13:ff:c9:8a:10:7f:32:9b:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=129222ef-559a-46fb-8710-a5b4a61516a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:dc:66:d1:0d:fd:b6:1a:5b:a3:b7:94:93: f7:e8:f0:64:45:a5:62:58:b8:b1:77:25:90:3c:7b: 97:09:f7:b2:cb:6b:4b:ed:ef:57:10:00:d4:80:72: 17:45:7f:67:29:95:b8:18:35:34:86:e2:74:03:8a: 00:1e:ca:a4:c2:e0:6f:26:11:4e:0c:ac:54:99:0a: b7:ea:01:a0:c9:70:05:a5:83:96:81:88:04:3b:4c: 3e:ff:73:7c:c2:83:4b:18:af:27:32:01:fd:80:53: b5:4c:a6:0a:96:e9:e8:e3:be:eb:76:aa:03:64:b9: 9f:1b:8a:6a:21:09:b6:e1:9c:2c:d2:70:02:48:ad: 0c:c4:3f:39:6c:7a:ee:fa:1c:be:fb:55:f6:c0:f4: 61:ae:2e:4e:2b:8e:bd:34:ab:da:31:c9:ea:25:dc: 43:75:86:d7:f3:f6:b7:38:ec:17:36:7c:18:68:6f: 53:62:e7:47:33:72:8a:d8:9b:12:f6:bd:33:20:79: cb:39:48:76:f3:dc:d5:5b:50:56:b7:30:41:44:dc: 41:20:42:e4:16:49:ca:5a:36:88:42:6f:49:6e:b0: 20:b1:17:22:a3:db:f8:bb:a0:06:4d:e4:ee:37:50: 6a:cc:04:1b:ff:3b:ee:1a:e7:fc:bc:92:e9:fa:a4: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:64:67:8D:2B:28:28:BA:CC:C9:CC:2B:80:BD:FC:8D:26:87:3B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37ba3cd5-c664-374e-a449-0a19748669f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:cd:e2:dd:a5:e1:71:dc:fc:67:76:2a:60:e7:3b:62:9b:4b: 39:ab:4f:3f:1c:b5:c9:5a:14:ed:04:bd:3d:9f:51:52:5f:62: 54:f5:dd:c2:fe:be:46:24:8a:dc:e2:0c:86:6e:66:85:be:60: a2:1e:12:86:ad:0e:44:28:99:04:cb:86:ba:48:87:ab:3f:36: 1d:4a:14:d8:ec:e9:41:df:2a:eb:30:86:02:7f:52:b0:de:7f: 33:73:56:0e:ff:19:9a:90:02:cb:02:44:d7:5f:ba:87:be:76: 0e:dd:a4:d5:b6:cc:7a:df:ad:55:72:14:80:e9:5d:62:01:10: 0f:b1:4e:e7:f7:62:7b:1d:4c:d2:4f:96:7a:15:c3:3d:ad:0d: 40:6a:c6:3e:27:b2:fc:05:43:34:dc:fa:64:93:4b:1e:f1:c6: 4f:74:91:a0:d6:cb:95:60:51:a4:24:9b:e6:53:70:78:ad:94: aa:04:4b:59:47:09:37:15:f1:55:38:6a:03:68:2e:ac:aa:68: bf:93:ce:54:e7:99:8b:e8:0f:c7:23:e3:b3:94:b9:c0:07:dc: 1a:d5:11:fe:37:a2:47:d4:81:6d:64:80:95:c3:e7:db:42:cb: a2:e6:2d:12:4f:5b:60:25:ce:38:76:b4:4b:cb:7f:29:c1:78: 47:22:cf:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhP/yYoQfzKbVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTI5MjIyZWYtNTU5YS00NmZiLTg3MTAtYTViNGE2MTUxNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodncZtEN/bYaW6O3lJP36PBkRaViWLixdyWQ PHuXCfeyy2tL7e9XEADUgHIXRX9nKZW4GDU0huJ0A4oAHsqkwuBvJhFODKxUmQq3 6gGgyXAFpYOWgYgEO0w+/3N8woNLGK8nMgH9gFO1TKYKluno477rdqoDZLmfG4pq IQm24Zws0nACSK0MxD85bHru+hy++1X2wPRhri5OK469NKvaMcnqJdxDdYbX8/a3 OOwXNnwYaG9TYudHM3KK2JsS9r0zIHnLOUh289zVW1BWtzBBRNxBIELkFknKWjaI Qm9JbrAgsRcio9v4u6AGTeTuN1BqzAQb/zvuGuf8vJLp+qRvOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFkZ40rKCi6zMnMK4C9/I0mhztdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiYTNjZDUtYzY2NC0z NzRlLWE0NDktMGExOTc0ODY2OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTN4t2l4XHc/Gd2KmDnO2KbSzmrTz8ctclaFO0EvT2fUVJfYlT13cL+ vkYkitziDIZuZoW+YKIeEoatDkQomQTLhrpIh6s/Nh1KFNjs6UHfKuswhgJ/UrDe fzNzVg7/GZqQAssCRNdfuoe+dg7dpNW2zHrfrVVyFIDpXWIBEA+xTuf3YnsdTNJP lnoVwz2tDUBqxj4nsvwFQzTc+mSTSx7xxk90kaDWy5VgUaQkm+ZTcHitlKoES1lH CTcV8VU4agNoLqyqaL+TzlTnmYvoD8cj47OUucAH3BrVEf43okfUgW1kgJXD59tC y6LmLRJPW2Alzjh2tEvLfynBeEcizxA= -----END CERTIFICATE-----Generated at Sat May 10 04:43:19 2025 by rpki-client